Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/189A2FDEE5CE11EDB697BC74C4F9AE02.roa
File: 189A2FDEE5CE11EDB697BC74C4F9AE02.roa (raw, json)
Hash identifier: jAZFx4ydSFHA49ERVnWN5fUaENw9xLGe1X1P7Vv6SCI=
Subject key identifier: C8:49:03:F8:40:37:CD:A4:D1:DC:A0:C2:E0:4A:B9:2C:81:52:A3:9B
Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Certificate serial: 19
Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/189A2FDEE5CE11EDB697BC74C4F9AE02.roa
Signing time: Fri 28 Apr 2023 14:08:06 +0000
ROA not before: Fri 28 Apr 2023 14:08:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151051
IP address blocks: 103.121.179.0/25 maxlen: 25
103.121.179.128/25 maxlen: 25
Validation: Failed, certificate revoked on Fri 28 Apr 2023 17:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Validity
Not Before: Apr 28 14:08:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=644bd346-b7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:6c:dd:41:74:1e:bd:3b:51:3a:6c:c1:76:
e3:40:48:e9:94:3a:00:50:e9:dc:40:31:b1:e5:ad:
a9:6c:b1:24:e6:e4:4f:22:aa:40:d4:b8:e7:a1:b7:
03:cd:22:b3:e4:14:9a:79:fc:a1:f5:6c:61:43:27:
3f:fe:49:26:d3:a2:55:7e:0a:5c:b1:da:3e:26:23:
95:fc:35:4a:5b:6b:55:33:90:44:e3:54:14:a2:e1:
95:7f:57:dc:e4:a1:45:65:5c:04:f5:d0:3e:58:3e:
0f:8a:88:6f:e0:4f:ee:28:d9:9e:68:9c:14:b4:4a:
27:11:70:1a:63:86:82:97:0e:04:f5:5f:bc:3b:2d:
56:6d:d0:88:87:11:27:d6:88:82:71:45:72:e3:38:
e9:20:44:66:19:c1:4c:fe:4d:03:d8:8e:ac:ad:d1:
67:67:8e:5e:3a:d1:2c:ec:2a:9e:67:ea:2b:5d:0e:
f0:9d:53:21:00:88:c7:48:d2:4f:e2:6a:b5:83:19:
c5:8c:46:2a:97:5d:df:d9:6e:6a:85:19:20:82:ab:
5d:a4:be:1b:89:f5:19:05:53:e6:27:97:68:a5:75:
a1:9e:86:64:41:88:4b:7a:25:31:aa:b2:5b:3f:1a:
40:fc:8b:b1:cc:87:51:9d:2a:98:01:bd:95:1d:8d:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:03:F8:40:37:CD:A4:D1:DC:A0:C2:E0:4A:B9:2C:81:52:A3:9B
X509v3 Authority Key Identifier:
keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/189A2FDEE5CE11EDB697BC74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.179.0/24
Signature Algorithm: sha256WithRSAEncryption
00:59:22:da:ea:66:3c:18:a1:50:90:d5:f2:8f:c0:5b:44:58:
51:3b:52:59:4e:bb:bb:df:2c:ed:29:c4:eb:f0:0a:95:02:8f:
72:58:4b:9c:c2:08:1c:1d:87:18:94:46:84:d5:ae:8e:8a:35:
fb:3b:e7:11:53:ce:d5:d2:e8:10:cd:20:eb:c8:5b:fd:11:36:
db:2a:ba:c1:9e:20:7e:c8:61:e0:66:1e:eb:74:72:a8:45:99:
da:6a:7f:8f:cb:30:df:b7:3f:5c:c1:6b:74:53:c5:13:7c:cb:
60:fb:c5:b4:63:ee:97:da:ef:fb:76:31:d8:27:8e:b2:7b:fb:
e1:2a:7e:72:9b:ab:2f:96:fa:6a:98:a4:24:ca:7c:a5:62:1e:
9b:e2:26:48:02:7d:43:64:56:1b:14:e8:bb:09:bd:bf:75:61:
d8:22:ab:5d:0e:18:52:7b:e3:c1:06:2a:9f:b3:f4:e6:a7:8e:
67:0d:9b:0d:ca:4a:65:cc:21:4c:10:0c:4d:65:a9:de:db:ce:
65:42:22:68:53:81:25:d9:55:21:37:83:09:15:00:20:5c:67:
93:d5:fc:77:bf:20:f2:45:08:4d:f3:61:d0:a7:5d:44:b3:0d:
33:ff:2c:bf:69:a9:7d:e2:06:96:7a:c6:2a:3b:45:3e:92:b7:
9d:89:ac:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org